Incorrect Authorization

gitlab is vulnerable to Incorrect Authorization. This allows a malicious attacker in possession of a project deploy token to use it from any location even if IP address restrictions were set...

CVE-2022-2416

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment...

CVE-2022-2416

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment...

Design/Logic Flaw

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment...

CVE-2022-2416

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment...

CVE-2022-2416

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment...

CVE-2022-2416

CVE-2022-2416 affects Octopus Deploy. A low-privileged guest can craft a request that allows enumeration of an environment, per the CVE descriptions across NVD/Red Hat/other sources. The connected documents confirm the existence of the vulnerability and its basic impact (environment enumeration) ...

CVE-2022-2346

In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints...

CVE-2022-2346

In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints...

Code injection

In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints...

CVE-2022-2346

In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints...

CVE-2022-2346

In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints...

CVE-2022-2346

CVE-2022-2346 affects Octopus Deploy. The public records describe a vulnerability where a low privileged guest user can interact with extension endpoints. The sources do not specify affected versions, exact vulnerable component, or root cause in a way that enables precise remediation steps. Repor...

CVE-2022-2416: Server-Side Request Forgery (SSRF)

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment...

Octopus Deploy Code Issue Vulnerability

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. Octopus Deploy suffers from a security vulnerability that stems from the possibility that a user with low privileges could craft a request that allows enumeration or...

PT-2023-12721 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows a low privileged guest user to interact with extension endpoints. Recommendations: At the moment, there is no information about a newer version that contains a fix f...

CVE-2022-2346: Undefined Security Weakness

In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints...

PT-2023-12744 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows a low-privileged guest user to craft a request that enables enumeration or reconnaissance of an environment. Recommendations: At the moment, there is no information...

Octopus Deploy Security Vulnerability

Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. Octopus Deploy suffers from a security vulnerability that stems from the ability of a user with low privileges to interact with an extension endpoint...

CVE-2020-10962

In PowerShell App Deployment Toolkit aka PSAppDeployToolkit through 3.8.0, an incorrect access control vulnerability in the default configuration may allow an authenticated user to potentially enable escalation of privilege via local access...